Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:28:41 +0000 cnvd-2024-33808 https://cve.radiocsirt.org/vuln/cnvd-2024-33808 cnvd-2024-33808 https://cve.radiocsirt.org/vuln/cnvd-2024-33808 EUVD-2026-206416 https://cve.radiocsirt.org/vuln/euvd-2026-206416 EUVD-2026-206416 https://cve.radiocsirt.org/vuln/euvd-2026-206416 fkie_cve-2024-38503 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38503 <p>When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduser, when editing “Personal Information” or “User Requests”.</p> <p>Users are recommended to upgrade to version 3.0.8, which fixes this issue.</p> <p>When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduser, when editing “Personal Information” or “User Requests”.</p> <p>Users are recommended to upgrade to version 3.0.8, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-38503 GHSA-8pxv-x6jq-5vw9 — Apache Syncope Improper Input Validation vulnerability https://cve.radiocsirt.org/vuln/ghsa-8pxv-x6jq-5vw9 <p><strong>Affected:</strong> Maven: org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui, Maven: org.apache.syncope.client.idrepo:syncope-client-idrepo-console</p> <p>When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduser, when editing &#34;Personal Information&#34; or &#34;User Requests&#34;.</p> <p>Users are recommended to upgrade to version 3.0.8, which fixes this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui, Maven: org.apache.syncope.client.idrepo:syncope-client-idrepo-console</p> <p>When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduser, when editing &#34;Personal Information&#34; or &#34;User Requests&#34;.</p> <p>Users are recommended to upgrade to version 3.0.8, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-8pxv-x6jq-5vw9